In the article it says that the individual is in the EU. They are a resident of Italy, which is in the EU, so they are within scope of GDPR. However, I still d

In the article it says that the individual is in the EU. They are a resident of Italy, which is in the EU, so they are within scope of GDPR. However, I still don't think there's nothing illegal here. AFAIK & IANAL, It's not illegal to process EU resident data in data controllers outside of the EU (in the US).